Lucene search
+L

2629 matches found

Vulnrichment
Vulnrichment
•added 2025/07/09 7:06 a.m.•12 views

CVE-2025-7378 An improper input validation vulnerability was found on manipulating configuration of ADM

An improper Input Validation vulnerability allows injecting arbitrary values of the NAS configuration file in ASUSTOR ADM. This could potentially lead to system misconfiguration and break the format of the configuation file, causing the NAS to exhibit unexpected behavior. This issue affects ADM:...

6CVSS7.2AI score0.00149EPSS
SaveExploits0References1
CVE
CVE
•added 2025/07/09 7:06 a.m.•45 views

CVE-2025-7378

ASUSTOR ADM CVE-2025-7378 is an improper input validation vulnerability affecting ADM versions 4.1 through 4.3.1.R5A0, allowing arbitrary values to be injected into the NAS configuration file and potentially causing misconfiguration and unexpected NAS behavior. The issue is mitigated by updating ...

6CVSS6.6AI score0.00149EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/07/09 7:06 a.m.•28 views

CVE-2025-7378 An improper input validation vulnerability was found on manipulating configuration of ADM

An improper Input Validation vulnerability allows injecting arbitrary values of the NAS configuration file in ASUSTOR ADM. This could potentially lead to system misconfiguration and break the format of the configuation file, causing the NAS to exhibit unexpected behavior. This issue affects ADM:...

6CVSS0.00149EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/07/09 12:00 a.m.•16 views

PT-2025-28858 · Asustor · Asustor Adm

Name of the Vulnerable Software and Affected Versions: ASUSTOR ADM versions 4.1 through 4.3.1.R5A0 Description: The issue is related to improper input validation, allowing arbitrary values to be injected into the NAS configuration file. This could lead to system misconfiguration, breaking the...

6CVSS6.4AI score0.00149EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/09 12:00 a.m.•8 views

CVE-2025-7378: Improper Input Validation

An improper Input Validation vulnerability allows injecting arbitrary values of the NAS configuration file in ASUSTOR ADM. This could potentially lead to system misconfiguration and break the format of the configuation file, causing the NAS to exhibit unexpected behavior. This issue affects ADM:...

6CVSS6AI score0.00149EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/06/23 12:00 a.m.•17 views

QNAP File Station 5 Trust Management Issues Vulnerability (CNVD-2025-15403)

QNAP File Station 5 is a file management system launched by Weilian Technology, which is mainly used for file management of NAS devices. QNAP File Station 5 suffers from a trust management issue vulnerability that stems from improper certificate validation, no details of the vulnerability are...

8.8CVSS7.1AI score0.00263EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/06/23 12:00 a.m.•16 views

QNAP File Station 5 Path Traversal Vulnerability

QNAP File Station 5 is a file management system launched by Weilian Technology, which is mainly used for file management of NAS devices. A path traversal vulnerability exists in QNAP File Station 5, which stems from the program failing to properly filter special elements in the path of a resource...

7.2CVSS7AI score0.00562EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/06/23 12:00 a.m.•20 views

QNAP File Station 5 Trust Management Issues Vulnerability (CNVD-2025-15406)

QNAP File Station 5 is a file management system launched by Weilian Technology, which is mainly used for file management of NAS devices. QNAP File Station 5 suffers from a trust management issue vulnerability that stems from improper certificate validation, no details of the vulnerability are...

8.8CVSS7.1AI score0.00263EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/06/19 8:33 p.m.•15 views

CVE-2022-50058

In the Linux kernel, the following vulnerability has been resolved: vdpasimblk: set number of address spaces and virtqueue groups Commit bda324fd037a "vdpasim: control virtqueue support" added two new fields nas, ngroups to vdpasimdevattr, but we forgot to initialize them for vdpasimblk. When...

7CVSS7AI score0.00163EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2025/06/18 11:15 a.m.•21 views

UBUNTU-CVE-2022-50058

In the Linux kernel, the following vulnerability has been resolved: vdpasimblk: set number of address spaces and virtqueue groups Commit bda324fd037a "vdpasim: control virtqueue support" added two new fields nas, ngroups to vdpasimdevattr, but we forgot to initialize them for vdpasimblk. When...

5.5CVSS5.7AI score0.00163EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/06/18 12:00 a.m.•24 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a null pointer dereference due to vdpasimblk not initializing the nas and ngroups fields...

5.5CVSS5.9AI score0.00163EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/06/06 12:00 a.m.•17 views

QNAP operating system command injection vulnerability

QNAP QTS is a Linux-based NAS operating system launched by QNAP, providing an intuitive and easy-to-use graphical interface and powerful data management features. QNAP QuTS hero is an operating system launched by QNAP specifically for enterprise-level applications, adopting the ZFS file system,...

8.8CVSS8AI score0.00971EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2025/05/29 6:28 a.m.•402 views

Exploit for Classic Buffer Overflow in Free5Gc

CVE-2025-29632 the information for the vulnerability covered b...

5.4CVSS6.2AI score0.00353EPSS
SaveExploits2
Positive Technologies
Positive Technologies
•added 2025/05/28 12:00 a.m.•22 views

PT-2025-23057 · Qnap · Qnap Nas

Name of the Vulnerable Software and Affected Versions: QNAP NAS affected versions not specified Description: The issue concerns a denial of service. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

6.6AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/23 9:47 a.m.•20 views

CVE-2024-34476

Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: ogsnasencrypt in lib/nas/common/security.c for pkbuf-len...

5.3CVSS6.8AI score0.00513EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 8:41 a.m.•17 views

CVE-2024-23350

Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose integrity check has failed, and the other is LPP where UE needs to send status message to network...

6.5CVSS7AI score0.00171EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 8:08 a.m.•21 views

CVE-2024-34475

Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: gmmstateauthentication in amf/gmm-sm.c for != OGSERROR...

7.5CVSS6.8AI score0.00612EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 7:53 a.m.•14 views

CVE-2024-24423

The Linux Foundation Magma = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 was discovered to contain a buffer overflow in the decodeesmmessagecontainer function at /nas/ies/EsmMessageContainer.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a...

7.5CVSS7.5AI score0.00597EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 7:28 a.m.•19 views

CVE-2024-24417

The Linux Foundation Magma = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 was discovered to contain a buffer overflow in the decodeprotocolconfigurationoptions function at /3gpp/3gpp24.008smies.c. This vulnerability allows attackers to cause a Denial of Service DoS via a...

7.5CVSS7.5AI score0.00597EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 7:07 a.m.•20 views

CVE-2024-24421

A type confusion in the nasmessagedecode function of Magma = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 allows attackers to execute arbitrary code or cause a Denial of Service DoS via a crafted NAS packet...

9.8CVSS7.8AI score0.00944EPSS
SaveExploits1References1
Rows per page
Query Builder